Dispersed Storage Network Data Retrieval and Integrity

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional computer storage systems face challenges with data integrity and security due to the failure of memory devices, particularly those using physical movement technologies, which can lead to data loss and unauthorized access, especially as data storage demands increase.

Innovation Solution

A distributed storage network (DSN) system that employs error coding dispersal storage to partition and encode data into multiple slices, storing them across physically diverse locations, allowing for reliable and secure data retrieval even in the event of device failures, and includes a storage integrity processing unit for verification and rebuilding of corrupted slices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Speed

If data is stored in a single centralized memory device, then access speed and simplicity are improved, but data integrity and security deteriorate due to device failure risks

Engineering Contradiction:
Improveaccess speedVSAvoiddata integrity
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

The patent divides data into multiple slices and distributes them across different memory devices in a dispersed storage network. Each slice is stored on a separate device, so that no single device holds the complete data set. This segmentation allows fast local access to individual slices while maintaining overall data integrity through distribution, resolving the contradiction between access speed and reliability.

Inventive Principle:
Principle #1Segmentation

2Reliability

If data is replicated across multiple memory devices, then data integrity is improved through redundancy, but device complexity and storage overhead increase

Engineering Contradiction:
Improvedata integrityVSAvoidstorage system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent creates multiple copies of data slices and distributes them across different memory devices in the dispersed storage network. Each device stores a portion of the replicated data, providing redundancy without requiring a complex centralized replication management system. This approach improves data integrity while keeping individual device complexity low, as each device independently manages its own stored slices.

Inventive Principle:
Principle #26Copying

3Ease of operation

If access information is stored centrally, then retrieval simplicity is improved, but security deteriorates due to unauthorized access risks

Engineering Contradiction:
Improveretrieval simplicityVSAvoidunauthorized access
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent segments access information into multiple portions and distributes them across different memory devices in the dispersed storage network. No single device holds the complete access information, so unauthorized access to one device does not compromise the entire system. Retrieval remains simple because the system automatically reassembles the distributed access information when needed, resolving the contradiction between operational simplicity and security.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS9094402B2Retrieving access information in a dispersed storage network
Publication Date: 2015.07.28 PURE STORAGE INC
  • US9094402B2 patent drawing
  • US9094402B2 patent drawing
  • US9094402B2 patent drawing

AI summary

A method begins by a processing module obtaining a set of recovered random numbers, decoding encrypted share slices to produce a set of encrypted shares, and obtaining a set of personalized authenticating values regarding user access to data. The method continues with the processing module generating a set of hidden passwords based on the set of personalized authenticating values, generating a set of blinded passwords based on the set of hidden passwords and a set of blinded random numbers, and generating a set of passkeys based on the set of blinded passwords and the set of recovered random numbers. The method continues with the processing module generating a set of decryption keys based on the set of blinded random numbers and the set of passkeys, decrypting the set of encrypted shares to produce a set of shares, and decoding the set of shares to reproduce the data.